Course Outline
Introduction to DevSecOps
- The significance of integrating security into the DevOps process.
- Core principles and practices of DevSecOps.
Continuous Integration (CI) Security
- Securing code repositories (GitLab integration with Jenkins).
- Automated code quality and security analysis using SonarQube.
- Implementing static code analysis as part of the Jenkins CI pipeline.
Container Security with Docker
- Creating secure Docker images.
- Managing Docker image repositories with Harbor.
- Best practices for vulnerability scanning and image version control.
Setting up Secure CI/CD Pipelines
- Configuring Jenkins for security integration.
- Running SonarQube analysis.
- Generating and securing Docker images.
Securing the Deployment Process with Kubernetes
- Security practices for Kubernetes orchestration.
- The role of the Kubernetes Orchestrator in secure progressive deployment.
- Implementing RBAC (Role-Based Access Control) and securing service communication.
Integrating RabbitMQ, PostgreSQL, and MongoDB
- Ensuring secure communication between services.
- Data security practices for PostgreSQL and MongoDB.
- Hardening RabbitMQ for secure messaging.
Identity and Access Management with Keycloak
- Configuring Keycloak for user authentication and authorization.
- Managing identity for Kubernetes clusters.
Implementing Security in Kubernetes
- Deploying applications securely on Kubernetes.
- Integrating Keycloak with Docker and Kubernetes for identity management.
Monitoring and Auditing in DevSecOps
- Continuous monitoring tools and techniques.
- Auditing deployments and maintaining compliance.
- Practical guide to automating rollback on security failures.
Summary and Next Steps
Requirements
- Familiarity with the DevOps process.
- Basic working knowledge of Docker containers and Kubernetes orchestration.
Target Audience
- DevOps professionals.
Testimonials (2)
The knowledge and experience of the consultant, as theoretical topics are addressed by applying them to the reality of processes. The course contains a highly valuable program in information technology management.
Luis Castro Gamboa - Cooperativa De Ahorro Y Credito Ande No. 1 R.L.
Course - Site Reliability Engineering (SRE) Foundation®
Machine Translated
That it was very clear in each specification
Ricardo Ramirez - AMX CONTENIDO
Course - DevOps Leader (DOL)®
Machine Translated
